@inproceedings{auditingdifferentiallyprivatemachine,
  title = {Auditing Differentially Private Machine Learning: How Private is Private SGD?},
  author = {Matthew Jagielski and Jonathan Ullman and Alina Oprea},
  year = {2020},
  booktitle = {NeurIPS 2020 12},
  eprint = {2006.07709},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2006.07709v1},
}